AI Tools Can Point You to Fake Websites

You ask an AI tool a simple question: “How do I log into Netflix?” It replies with a helpful guide and even a link. But in about one out of three cases, that link doesn’t go to the real Netflix site — it leads you to a phishing page instead.

This risk has already been spotted with banking logins. For example, searching “Wells Fargo login” through an AI tool once directed users to a fake page built with Google Sites. Because AI models generate links based on patterns, not verification, they may unknowingly send you straight to criminals.

Fraudsters take advantage of this weakness by creating lookalike domains. They use tricks like replacing letters with numbers (e.g., g00gle.com instead of google.com), adding extra words (e.g., netflix-login.com), or swapping letters (e.g., paypa1.com). These small differences can be hard to spot but are designed to steal your login details.

What you should do

Check the domain: always look closely at the URL for small changes.

Search manually: type the company name into a search engine instead of trusting AI links.

Use bookmarks: save the real website so you can return safely every time.